In brief
- The necessary cookies keep signing in, scans and forms working.
- Two purposes are optional: remembering which ad or link brought you here, and sending masked error reports and screen replays to PostHog in the EU. In the EU, the EEA and the UK they stay off until you say yes in the cookie banner; elsewhere they run unless you say no. Change your answers any time in Cookie settings at the bottom of every page.
- No advertising cookies. Error reports and replays use no cookie. With analytics permission, PostHog uses sessionStorage for this tab until it closes or you withdraw permission.
- The websites we build for businesses set no cookies of their own.
1. What we set
| Kind | What for | How long |
|---|---|---|
| Sign-in | Keeps you signed in, and finishes a Google sign-in | Until you sign out or the session expires |
| Last sign-in method | Remembers how you last signed in and with which email, to mark it "Last used"; it stays after you sign out | 180 days |
| Design previews | Lets your browser load the previews of the designs made for your business, for that scan only | 1 hour |
| Your photos | Lets your browser load your business's photos in Files, for that business only | 1 hour |
| Workspace sidebar | Remembers whether the sidebar in your workspace is folded or open | 7 days |
| Appearance | Remembers your workspace's theme and light, dark or system mode in this browser; it stays after you sign out | 365 days |
| Pilot panel | Remembers whether Pilot's chat panel was open or closed in your workspace, so it opens the way you left it | 180 days |
| Time zone | Remembers your browser's time zone (a name such as America/Los_Angeles), so Home greets you for your time of day as soon as it opens | 180 days |
| Recently opened businesses | Remembers the businesses you opened on this browser, so your workspace's first frame shows them as you left them: each one's name, kind and icon, the rows its sidebar showed (posts and socials, your teammates' names and faces) and how many things wait for you, inquiries are unread and bookings wait, with a code of your account so no one else signed in on this browser sees them. No customers' names, messages or contact details | 180 days |
| Your cookie choices | Remembers your answer in the cookie banner, so we don't ask again; it holds only the answer and when you gave it | 6 months |
| Kind | What for | How long |
|---|---|---|
| Studio | Local storage: your unsent message, the chat you had open, your language and whether you have seen the studio tour | Until you clear it |
| Report and checklist | Local storage: what you have seen and ticked, in the report and in the Google listing checklist | Until you clear it |
| Sign-up and connections | Session storage: a step carried across a sign-in or a provider's page | Until the tab closes |
| Bot check | Cloudflare checks that a person, not a bot, visits or sends a form, and may set cf_clearance so this browser is not checked again; it does not track you across sites | Up to a year |
Everything in these two tables is strictly necessary for a service you asked for, so the law does not require your consent for it.
| Kind | What for | How long |
|---|---|---|
| Marketing | Remembers the ad or link campaign that first brought you here (its source and campaign name, the kind of site that sent you and the page you landed on, never an ad's click ID), so we can tell which campaigns bring new sign-ups. Never set once you are signed in, or when your browser sends Global Privacy Control, and removed if you change your answer to no | 90 days |
| Analytics | Sends errors and masked app replays to PostHog in the EU. Marketing and free-tool pages send only errors after you accept analytics. Stores a random visitor id, session data and pseudonymous owner and business references in sessionStorage for this tab; no cookie or email address. Reloading keeps the session; withdrawing permission clears it | Until the tab closes or you withdraw |
In the EU, the EEA and the UK both optional purposes run only after you say yes in the cookie banner. Elsewhere they run unless you say no in Cookie settings. Gibraltar, Jersey, Guernsey and the Isle of Man count with the UK here. We go by the country your connection comes from; if we cannot tell, we ask. An explicit answer is honoured everywhere: a no removes the campaign cookie or stops error reports and replays. Global Privacy Control always turns the campaign cookie off; without a replay answer it also turns replays off, but you can still allow replays in Cookie settings. If we add another optional purpose, we will ask again and list it here.
We count page requests on our own servers (which page, the kind of site that sent you, country, phone or computer), without cookies and without storing IP addresses, to see how the site is used.
2. On businesses' websites
Websites PlacePilot builds set no cookies of their own and run no analytics or advertising trackers. They count taps on buttons such as Call and Book on our own servers, without cookies. A bot check protects their inquiry forms. A booking system a business uses loads only when a visitor opens it, and that provider's own notice applies.
3. Your choices
Change or withdraw your answers about either optional purpose any time in Cookie settings at the bottom of every page.
You can delete cookies and site data in your browser's settings at any time. If you block them, you will be signed out.
Questions: support@getplacepilot.com.
